{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8a4ed72f-f076-5497-ae30-5d095586d6aa",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:pypi/django@5.0.2.post1+tuxcare",
      "type": "library",
      "name": "django",
      "version": "5.0.2.post1+tuxcare",
      "purl": "pkg:pypi/django@5.0.2.post1+tuxcare"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3fba221a-93ff-530f-a323-0f7c6d179949",
      "id": "CVE-2024-27351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-27351 is fixed in version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3529c1e4-dd0d-5708-b597-c43bb3bd2855",
      "id": "CVE-2024-38875",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38875 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26eef603-f683-5f8c-8b5b-29df6adc9b6e",
      "id": "CVE-2024-39329",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39329 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f83d6e54-f047-5615-a3af-2c2da3160f8b",
      "id": "CVE-2024-39330",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39330 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9fd3c79-0673-58d4-8f36-4f134060eedd",
      "id": "CVE-2024-39614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-39614 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e65d40df-8ef3-5018-bca3-dd3c9a6df1ab",
      "id": "CVE-2024-41989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41989 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68ddbbc1-52ac-52ed-950c-712b2171a6d1",
      "id": "CVE-2024-41990",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-41990 does not affect version 5.0.2.post1+tuxcare of django. not_affected \u2014 Django 5.0.2 uses the original simple trim_punctuation implementation that lacks the vulnerable code pattern. CVE-2024-41990's DoS vulnerability was introduced by the CVE-2024-38875 fix (commit d666457453, June 2024) which replaced the simple implementation with a complex CountsDict-based one containing repeated rfind('&') calls. The target version predates this architectural change and therefo..."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e4ba1ab-b5eb-51f7-be84-981e6ff42779",
      "id": "CVE-2024-41991",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41991 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:643868c7-d072-5595-927a-c98139751c90",
      "id": "CVE-2024-42005",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-42005 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f210f80-2d65-53ab-a2f6-deee7ab56ee2",
      "id": "CVE-2024-45230",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45230 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bef00501-5104-5a46-9677-e8760c85b0f6",
      "id": "CVE-2024-45231",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-45231 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81e229f5-9ef6-5624-b876-b5596fe1abbe",
      "id": "CVE-2024-53907",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53907 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e64a171a-d67f-51de-8cfd-3c8173b5b2d9",
      "id": "CVE-2024-53908",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-53908 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf7e6634-9f21-5e29-bd04-429bc963fea3",
      "id": "CVE-2024-56374",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56374 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:122d71c2-7247-5ac2-82c3-e9e899e6f1c8",
      "id": "CVE-2025-13372",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13372 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5408f979-e20e-50b4-85dc-111001d03ef5",
      "id": "CVE-2025-13473",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-13473 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:811f5bc0-1b41-536c-be0f-5fc17a2e30cf",
      "id": "CVE-2025-14550",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-14550 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c9d76d80-bf5b-5781-a05b-cd5709e83071",
      "id": "CVE-2025-26699",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-26699 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fb179d2-e686-5ea9-afd2-48da3626a0ba",
      "id": "CVE-2025-27556",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27556 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e721eba2-ae8e-5070-8d9b-e0a3fae0a47d",
      "id": "CVE-2025-48432",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48432 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b456886b-ed8a-56c4-8a9a-11d1311a59cd",
      "id": "CVE-2025-57833",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-57833 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70b1df50-eedf-5b1d-b642-ee01892e9a0b",
      "id": "CVE-2025-64458",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64458 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5b63489-cf6f-5528-8e4d-f29b7f5a2706",
      "id": "CVE-2025-64459",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64459 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:505e8cbd-4ec7-5e24-97a6-ad758a0f56d8",
      "id": "CVE-2025-64460",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-64460 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d55b097b-1003-5743-917b-4f213c5e88ba",
      "id": "CVE-2026-1207",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1207 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9169416e-5f24-5bcd-afef-a961cddc88c9",
      "id": "CVE-2026-1285",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1285 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e84c0752-4901-5e31-a874-b407e99f9681",
      "id": "CVE-2026-1287",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1287 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e7467bb-cee2-5826-83ae-1da6c039f975",
      "id": "CVE-2026-1312",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-1312 affects version 5.0.2.post1+tuxcare of django."
      },
      "affects": [
        {
          "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:pypi/django@5.0.2.post1+tuxcare"
    }
  ]
}